Rules for processing personal data at DOMURAT Sp. z o.o.

1. Data Controller

The controller of personal data is DOMURAT Sp. z o.o. (hereinafter: the “Controller”) operating in the field of design and manufacturing of equipment and stainless-steel installations.

Contact the Controller regarding data protection matters: firma@domurat.com.pl, tel. +48 609 558 896.

2. Scope and purposes of data processing

We process personal data, in particular, in the following situations:

• Website contact form — we process the data provided (e.g., name and surname, email address, message content, and optionally consent to a newsletter) to respond to your inquiry, prepare an offer and continue correspondence.
• Direct contact — when you contact us by phone or email, we process the data provided during correspondence in order to handle your inquiry, prepare and perform cooperation and within ongoing business relations.
• Newsletter — if you subscribe to the newsletter (e.g., by ticking the relevant checkbox in the contact form), we process your email address and name in order to send information about new projects, offers and updates related to DOMURAT Sp. z o.o..
• Use of the website — in server logs and through cookies, technical data about your visit are collected (e.g., IP address, server date and time, browser information, operating system, visited subpages). These data are used to ensure the security of the service and, for analytics cookies, to analyze traffic on the website (details in the Cookie Policy).

3. Legal basis for processing

We process data on the following legal bases:

• Article 6(1)(b) GDPR — where processing is necessary to take steps at your request prior to entering into a contract or to perform a contract (e.g., preparing an offer, arrangements regarding cooperation, fulfillment of orders).
• Article 6(1)(f) GDPR — the Controller’s legitimate interests, in particular: conducting correspondence, pursuing or defending claims, ensuring the security of the service and handling ongoing business contacts.
• Article 6(1)(a) GDPR — to the extent you give consent (e.g., to the newsletter or analytics cookies, if used).

3a. Voluntary provision of data

Providing personal data is voluntary, but in some cases it may be necessary to achieve the stated purposes — e.g., without an email address we will not be able to respond to a message sent via the form, and without consent we will not send the newsletter.

4. Data retention period

We store data for the period necessary to fulfill the purpose for which they were collected, and then for the period required by law or justified by the limitation period for claims. In particular:

• data from the contact form — generally for the time needed to handle the inquiry and any subsequent business contact;
• data processed on the basis of consent (e.g., newsletter) — until consent is withdrawn or an effective objection is raised;
• data in server logs — for the period necessary to ensure the security of the service and to analyze its operation.

5. Data recipients

Data may be shared with entities cooperating with the Controller, such as:

• the provider of hosting and the website’s server infrastructure,
• entities providing technical support for maintaining the website and IT systems,
• entities providing analytics services (e.g., statistical tools) or marketing services — only to the extent you give the relevant consents (e.g., for analytics cookies).
• legal advisors, accountants and other professional advisors — to the extent necessary to perform their services for the Controller.

If we use suppliers based outside the European Economic Area (EEA), data may be transferred to third countries. In such a case, we ensure appropriate safeguards as provided by the GDPR (e.g., standard contractual clauses).

6. Your rights

In connection with the processing of personal data, you have the following rights:

• the right to access your data and receive a copy,
• the right to rectify (correct) data,
• the right to erasure (“right to be forgotten”) in cases provided for by the GDPR,
• the right to restrict processing,
• the right to data portability (where the basis is a contract or consent),
• the right to object to processing based on the Controller’s legitimate interests — for reasons related to your particular situation,
• the right to withdraw consent at any time — without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal,
• the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) (ul. Stawki 2, 00-193 Warsaw, Poland) if you believe that data processing violates the GDPR.

You can exercise your rights by contacting us at the email address indicated in section 1.

7. Cookies and analytics

Detailed information about the use of cookies and the possibility of changing settings can be found in the document Cookie Policy and in the panel Cookie Settings.

8. Changes to the Privacy Policy

The Privacy Policy may be updated from time to time, e.g., in connection with changes in law or in the service’s functionality. The updated version will be published on this page with the applicable effective date.